Malware can come from the ads on your site. Just a few minutes ago I got one of the fake "you have a virus, click here to clean" message boxes from an ad. Avast prompted me and redirected my traffic away from the site. I would suggest looking into your ads.